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© Device for the detection and discrimination of functional faults In an electrical power supply 
circuit 



© The device comprises a control circuit (2) integrating a power transistor (4) controlling the electricai power 
supply of a load (3), detectors (7, 8, 9) and a logic circuit (10) connected to a computer (1) by two lines (I/O) and 
(SEL). According to the invention, the computer selectively and successively controls, by specific combinations 
of logic signals applied on the lines (I/O) and (SEL). several logic sub-circuits for the detection and identification 
of functional faults in the power supply circuit of the load (permanent control, short-circuit, open circuit), the 
circuit (2) in return imposing on the line (I/O) logic levels representative of the presence or absence of faults, 
during time intervals in which the computer is configured to read these levels. 

Application to the diagnosis of the functional status of electro-valves forming part of a wheel anti-locking 
device on a vehicle. 
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The present invention relates to a device for the detection and discrimination of functional faults in an 
electncal power supply circuit and. more particularly, to such a device adapted to a power supply circuit of 
a load connected in series with an electronic switch controlled by a computer. 

At present, in the motor vehicle industry for example, electronic computers are used for controlling 
vanous actuators, injectors, electro-valves, ignition coils, electric motors, etc. By way of non-limitative 
example the electro-valves of motor vehicle wheel anti-locking devices may be quoted with respect to this 
Figure 1 of the appended drawing shows schematically the electronic section of a known device of this 
type, controlling six electro-valves EV-0 to EV-5 used for modulating the pressure in the braking circuits of 
wheels, after detection of the imminence of the skidding of at least one of the wheels of the vehicle with 
> respect to the ground. The excitation winding of each electro-valve is connected on the one hand to a 
voltage source +Vbat constituted by the battery of the vehicle and. on the other hand, to an OUT pin of a 
control circuit (COO to CC-5) for the power supply of the winding by a selective connection to ground GND 
in order to do this, the circuit conventionally comprises a power transistor, of the MOS type for example 
whose drain-source circuit is connected between the OUT pin and the ground pin GND. The switching of 
the power transistor is ensured by signals coming from a main computer and supplied to the input IN of the 
control circuit, via an input bus. Such control circuits are well known and normally include, in addition to a 
power section in.which the current coming from the battery flows, a section powered at low cunent and 
capabte of processing logic signals used on the one hand for controlling the power transistor and on the 
other hand for the detection of functional faults which are signalled to the main computer by signals emitted 
on a STATUS pin and transmitted to the computer by means of a "status" bus. Such a control circuit is 
commonly called a "smart power circuit" — as it is both capable of controlling an actuator using Its power 
section and of processing logic signals, for example, for the detection of short-circuits or other faults 
capable of preventing the correct functioning of an electro-valve and, more generally of the whole of the 
dev.ce. Furthermore the anti-locking device can also comprise an auxiliary monitoring computer which 
executes redundant computations on the signals received by the main computer in order to check the 
correct functioning of the latter. A power supply voltage VCC. for example +5 volts, supplies each of the 
control circuits and computers and return load resistors connected to the inputs IN-0 to IN-5 of the main 
computer connected to the status bus and to lines interconnecting the pins 0 to 5 of the two computers in 
order to provide for dialogue data exchanges between them. 

In the abovementioned application to the control of anti-locking of the wheels of a motor vehicle it is 
very important to know the functional state of each of the electro-valves as a functional fault of one or more 
o them can seriously affect the safety of the driving of the vehicle. It is observed however, in the diagram 
of toe known device shown in Rgure 1. that the transmission to the computer of data generated by the 
control circurts CC-0 to CC-5, relating to possible functional faults in the circuits or in toe electro-valves 
assoaated with them, requires that a rather large number of input and output pins (or "ports") are available 
on the computers. In addition to six output pins OUT-0 to OUT-5, used for sending to each control circuit 
commands for switching power transistors, each computer must comprise input pins IN-0 to IN-5 in order to 
receive data relating to possible functional faults in the control circuits. Unfortunately, the microprocessors 
currently available for equipping devices of the type shown in Figure 1 comprise a limited number of input- 
output pins while rt is desired to increase the number of actuators capable of being controlled by one 
microprocessor. It therefore appears that this increase can only be made possible by a reduction in the 
number of lines used for exchanging data between each control circuit and the associated computers while 
retaining all the functions mentioned above. «■•.»»■■■«» 
Furthermore, the known control circuits, after detection of a functional fault (thermal overload short- 
crrcurt load open circuit load etc..) are limited to maintaining the STATUS line at logic 0, a measure which 
does not allow the computer to determine the nature of the fault. This is a substantial disadvantage as all of 
the functional faults are not equally important and it would be useful for the functioning in degraded mode 
of toe control device, established by the computer on receiving a fault signal, to be able to take account 
both of toe nature of toe fault and of the position of the electro-valve which is affected by it By wav of 
example, a permanent control or excitation of an electrovalve due to an internal or external short-circuit of 
the power transistor of toe control circuit associated with this electro-valve can give rise to a drop in 
pressure in the hydraulic circuit controlling a wheel brake, which dangerously affects toe driver's abilily to 
stop his vehicle. The degraded functioning established by the computer should be able to take account of 
the dangerous nature of such a failure, in order still to ensure toe safety of the braking 

The object of toe present invention is therefore to produce a device for the detection of functional faults 
in an electrical power supply circuit of a load, in which the number of wire links between a control circuit of 
this power supply and a computer programmed to emit control signals for the power supply of the load and 
to organize the detection of possible functional faults of this power supply, is substantially reduced' with 
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respect to the number of links currently used in the known devices of the same type. 

Another object of the present invention is produce such a device allowing the discrimination of the faults 
signalled to the computer as a function of their nature. 

Another object of the present invention is to produce such a device allowing the provision of a periodic 
5 diagnostic test of the functional status of the device, in real time, the time interval dedicated to this 
diagnostic test being very short in order not to disturb the functioning of the loads. 

Another object of the present invention is to produce such a device allowing the installation of an 
auxiliary computer for monitoring the main computer. 

Another object of the present invention is to produce such a device allowing, in the case of the control 
70 of the power supply of several different loads, detection of possible cross-talk occurrences having origins 
which are internal or external to the control circuits, by the implementation of specific software means in the 
computer. 

These objects of the invention are achieved with a device for the detection and the discrimination of 
functional faults in at least one electrical power supply circuit for a load placed in series with an electronic 

is switch of which one control pin is connected to a computer by a control line transmitting to that pin 
switching signals controlled by the computer, this device comprising means of detection of at least one 
functional fault from the group formed by: the short-circuit of the load, the permanent control of the load and 
the opening of the power supply circuit of that load, characterized in that these means of detection 
comprise at least one detector sensitive to an electrical characteristic of a predetermined point in the power 

20 supply circuit of the load and capable of forming a logic signal representative of the position of the value of 
this characteristic with respect to a predetermined value, and a logic circuit connected to the output of the 
detector, to the control line and to a selection line both connected to the computer in order to transmit to 
the logic circuit at least one combination of logic signals emitted by the computer and capable of activating 
this circuit for the purpose of the detection of a possible presence of a particular fault and for the production 

25 of a signal representative of the detected situation, the output of the logic circuit then controlling means of 
imposition, on the control line, of one of two logic states respectively corresponding to the presence or the 
absence of the fault, the computer comprising means for configuring in readout mode that one of its ports 
which is connected to the control line when the logic state of the latter is imposed by the logic circuit and of 
identifying a possible fault by the readout of this state. 

30 The logic circuit comprises several sub-circuits each connected to one of the said detectors, the 
computer comprising means for establishing, on each of the control and selection lines, a plurality of series 
of logic levels according to line-to-line combinations each capable of activating one of the sub-circuits, the 
sub-circuits reacting successively to the reception, when they are activated, of a signal coming from an 
associated detector in order to impose on the control line a logic state corresponding to the received signal 

35 while the computer is reconfigured in order to read the state of this line, the series of logic states thus 
imposed on the control line by the various sub-circuits being identified by the computer as representative of 
the presence or absence of a particular fault. 

In the appended drawing given by way of example only: 

Figure 1 is a block diagram of the device for the detection of functional faults of several electrical power 
40 supply circuits of loads described in the preamble of the present description, 

Figure 2 is a functional block diagram of a control circuit incorporated in the device for the detection and 
discrimination of functional faults according to the invention. 

Figure 3 shows several timing diagrams for the logic states established on two pins of the circuit of 
Figure 2, for the detection of several different functional faults and the discrimination of these faults, 
45 Figure 4 is a timing diagram of various logic state sequences established on a control fine connecting the 
control circuit of Figure 2 to the computer, depending on whether the controlled power supply circuit is in 
a normal functional state, in a short-circuit state, In an open circuit state or in a permanent control of the 
load state, 

Figure 5 is a block diagram of a preferred embodiment of the control circuit of Figure 2, in particular of 
50 its logic section, and 

Figure 6 is a block diagram of the device according to the invention, adapted to the control of the 
electrical power supply of several loads by means of as many circuits of the type shown in Figures 2 
and 5, controlled by a main computer monitored by an auxiliary computer. 

Reference is made to the block diagram of Figure 2 and to the timing diagram of Figure 3 in order to 
55 describe the structure and the functioning of the device for the detection and discrimination of functional 
faults according to the invention. 

Figure 2 shows a computer 1 connected by a control line I/O and by a "selection" line SEL to a control 
circuit 2 for the electrical power supply of a load 3 connected between an electrical energy source +Vbat 
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«™ J° U J" Pin ° f ^ *" CifCUit 2 connected to »» drain of a power transistor 4 of the N-MOS type for 
ST L fl? ^ S C0nn8Cted t0 9r0Und via a measuri "9 resi ^ 5 whose present be 

order to adapt logic agnate received from the computer via the I/O line to the control of the switching of * c 
s fransistor. The circuit 2 furthermore comprises an excess voltage detector/ Tnm*Z 

8, a current detector 9 and a logic circuit 10 fed by the signaTs sS VZTS £££ 

7Z S f T^l* 3 ^ ^ ° n *• ' ine 11 ' SUCh — ^ iur^11 cSed 
the pin of the circuit 2 which is connected to the I/O line and ground GND 

Thus, the control circuit 2 is the type of circuit known by the name "intellioent Dower drrr.it*" 
^ 86080,1 (the transistor 4 > a low current logic s JoTass^a ^ith IL^l 
assembly being integrated on the same silicon chip in order to belnstalle^^^lJ^'l^H 
whose power supply is controlled by the signals generated by the amZZ I^T^ml^S 
SST I" 1 , 6 T** ° f 3 Wheel anti - ,ockin 9 ^mentioned Lve can^m^^S 

respectively ensure the detection of an opening of the cower suddT * ^ 9ned to 

control of that toad, and of a short-circuit ofthe^d E^SX S rcutco CpTc^ 

*e n K! 30 -? R ?? 12 " h0 - 0Ulput «** *• the «^1i^'oSr to tie 

^ 3 l0W to9iC level ^ there is de «ection of a short-circuit or of a peWanent ™Ll ?h! 
detecton of an open circuit results in the imposing of a "high" logic level on me JlK 

According to the present invention, the selection line SEL. whose function will be described in H e t ai . 

» an input of each of the sub-circuits CO, CP, and CC The I/O line whid! mnm w e *H connec T ™ 
» £T" *«"*"*■ «- ha *9 «~ »*>* «*> «» ** CC h^»X 

»Bh «» deacon o. Rgure e. ^ ^ vcon^STZSSLS ^S^Z 

command the interrogation of the sub-circuits CO CP a „7rr 2 !f 1* order ^ssively to 
retire esteblishmlnt by *» toglctSo tfa Z£L3 SSTLTTS^ 
^ectionaJ. tt.s sequence being read by the computer 1 in order to detent onTy me^nca of a 

^vennon wnich does not depend on the number of control circuits incorporated in the device the nature J 

H£ I « ? °" 8 C6rtain ' 0ad - 17,6 computer 08,1 t" 6 ^ be programmed in s^h a wa^ to 
estabhsh a functioning in degraded mode of the control of the Dower sunnlvTttha ™1 V M 33 t0 

OUT pm of the circuit 2, connected to the drain of the transistor 4. 

Reference is now made to the timing diagrams shown in Fioure -\ in n ,H» t„ u • 
the combinations of logic states and trains estat Zed by^ oVmputer on" mTTand l^ffn 
order to initiate the interrogation of the various sut^circuits CC. CO, and CT» ^ 
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Thus, at an instant t,. the computer takes the SEL line to the logic 1 state. The logic function executed 
by the sub-circuit CC is then such that if the current detector sends to the circuit CC a logic signal 
signifying an excess current read by the intermediary of a voltage reading at the terminals of the measuring 
resistor 5. this excess current resulting from a short-circuit of the load, the output of the logic sub-circuit 

5 goes to the 1 state in order to command the putting of the current source 11 into the conducting state, 
which establishes the logic 0 state on the I/O line while the computer has configured its port connected to 
this line in the input mode, in order to read the logic state imposed on this line by the logic circuit 10, 

It is necessary to pause for a moment on the functioning of the I/O line which, according to the 
invention, is bidirectional since it allows, on the one hand, the computer to send control signals for switching 

w the transistor 4, via the interface 6, and interrogation signals to the sub-circuits CO and CP, and on the 
other hand, the transmission of logic signals to the computer, which are representative of the responses 
generated by the sub-circuits CC, CO and CP subsequent to the sequential interrogations of these circuits 
by the computer. In this respect the presence of a pull-up load 13 connected between a power supply 
source of the device, for example a +5 volts source, and the I/O line, between the corresponding pins of the 

75 computer and the circuit 2 will be noted. Conventionally the computer comprises a transistor 14. of the 
MOS type for example, which allows the controlling of the state of the I/O line. Thus the pull-up load 13, the 
transistor 14 and the current source 11 provide the function known as the "hard-wired OR" function which 
allows either the current source 11 or the transistor 14 to draw the I/O line to the low state. 

Reference is again made to the timing diagram of Figure 3. and more particularly to the one concerning 

20 the status of the SEL and I/O lines for the control of the detection of a possible short-circuit of the load, in 
order to note that if the I/O line is not in the logic 1 state prior to the instant ti (curve in broken line), the 
computer commands the changing of this line to the 1 state in order to thus command the conduction of the 
power transistor 4 and to allow the detection of a possible short-circuit situation. If therefore, as has been 
seen above, such a short-circuit situation exists, the I/O line is taken to the low state after a time interval (t, 4 

25 t'i) due to internal time constants of the current detector 9. After this instant 1 1 the input port of the 
computer 1 connected to the I/O line is reconfigured in the input mode by the computer and the low state 
established on this line by the putting into conduction of the current source 11 commanded by the logic 
circuit 10 is therefore read by the computer which is thus informed of the presence of a short-circuit in the 
power supply circuit of the load 3. If, on the other hand, no short-circuit is detected, the I/O line is 

30 maintained, after the instant t'i, by the source 11 in the high logic state and the re-reading of this line by 
the input port of the computer allows the latter to be informed of the absence of short-circuit and therefore 
of a normal situation from this point of view. 

For the self-protection of the control circuit in the case of a short-circuit of the load, the sub-circuit CC 
comprises a short-circuit memory flip-flop, as will be seen later in connection with the description of the 

as embodiment of the circuit shown in Figure 5. It is therefore necessary to provide in the sub-circuit CC 
means for resetting this flip-flop to zero at the instant ti. These means are controlled by the changing to the 
high level of the SEL line controlled by the computer to interrogate the sub-circuit CC, as will be seen later 
again in connection with the description of the embodiment in Figure 5. 

The description will now be given of the means used for providing a detection of an accidental opening 

40 of the power supply circuit of the line. The message of activation of the sub-circuit CO then emitted by the 
computer is constituted by the changing to the high state of the SEL line, if the latter was not already in that 
state, at an instant ta later than the short-circuit detection phase described above, the computer command- 
ing at this instant U a transition to the low state of the I/O line which causes the cutting off of the power 
transistor 4. In the absence of accidental opening of the power supply circuit of the load 3, this sudden 

4S breaking of this circuit by the cutting off of the transistor 4 must normally cause the appearance of a high 
transient excess voltage on the OUT pin of the circuit 2, constituting the common point between the load 3 
and the drain of the transistor 4, if this load exhibits Inductance. In the presence of an excess voltage, i.e. in 
normal operation, the excess voltage detector 7 transmits a signal to the sub-circuit CO and this sub-circuit 
processes this signal in such a way as to transmit to the OR gate 12 a high state signal which draws the I/O 

so line to a low state. In the absence of the detection of such excess voltage, the sub-circuit CO causes, on 
the contrary, the drawing of the I/O line to the high state by the cutting off of the current source 11. This 
cutting off occurs after a time interval (t 2 . t' 2 ). After t' 2 the computer has reconfigured its port connected to 
the I/O line to the input mode in order to re-read, on the I/O line, either a high state signifying the existence 
of an open circuit or a low state signifying the absence of an accidental opening of the circuit. Obviously, 

55 the detection of excess voltage carried out for the revealing of a nonopening of the power supply circuit of 
the load 3 can only be considered if the latter has an excess voltage-generating inductive component at the 
breaking of the power supply circuit, as is the case with loads allowing the control of numerous actuators 
such as electromagnets or electro-valves. If the load to be controlled does not have such an inductive 
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10 



is 



20 



30 



component, the detection of an accidental opening of the circuit should of course make use of other means 
of revelation, the choice of these means as a function of the characteristics of the load being within the 
normal field of knowledge of those skilled in the art. 

The description will now deal with the means used in the invention for ensuring the detection of a state 
of permanent control of the load, resulting from a short-circuit of the power transistor 4. which short^ircuit 

IH ay ^ ntemal t0 tha COntrol Circuit 2 or external t0 *» latter ' when me lif » which connects the load 3 to 
the OUT pin of the circuit accidentally comes into contact with ground. The interrogation message 
addressed by the computer to the sub-circuit CP is then constituted as follows. On the one hand the SEL 
hne. whrch was maintained in the high state during the short-circuit and open-circuit detection phases is 
then taken, at an instant fa later than the open circuit detection phase described above to the low state 
Simultaneously the I/O line is forced to the low state by the computer even if the latter were already 
previously in this state because of a previous control of the current source 11 to that effect The forcinq to 
the low state of the I/O line causes the cutting off of the MOS transistor 4 which normally should cause as 
seen above m connection with the detection of a possible accidental opening of the circuit an excess 
voltage on the OUT pin. If the load is permanently controlled, the transistor 4 therefore being short-circuited 
such an excess voltage would obviously not appear and, on the contrary, the voltage on the OUT pin must 
be close to zero. The permanent control detector 8 is therefore constituted by a comparator which in the 
case in which the voltage on the OUT pin is greater than a predetermined value close to 0. sends a signal 
to the sub-cnruit CP which transmits a logic 1 state signal to the OR gate 12 in order that the latter forces 
the I/O fine to the low state, while the input port of the computer 1 connected to this line is reconfigured in 
tiie input mode starting from an instant 1 3 later than instant fa. If on the contrary the computer reads, after 
the instant 1 3 . that the I/O line is in the logic 1 state, the information is understood by me computer as 

co^TJtiiVload^ 51316 ° f ** PW " r SUPP ' y ° irCUit ° f ** toad " 3t te3St 88 reQardS ** manent 
The sequence of interrogation of the sub-circuits CC. CO. CP, has been described above in that order 
but the .nvention of course is not limited to such a sequence and its various phases could be placed in a 

™ Ifr?" ^?T er, J he ° rdef d8SCribed *»» is P referred 38 * a"ows. by holding the SEL line at the 
same high level during the consecutive phases associated with the detection of a short-circuit and of an 
open circuit, the limitation of the number of edges on the SEL line which avoids too many switchings of the 
power transistor in the case of a permanent short-circuit The chosen sequence also ensures a minimum 
number of switchings of the power transistor into the cut-off state, in order to avoid a heating up of the 
tiansistor under the effect of the excess "clamp" voltages (to use the English term) during the diagnostic 
sequence for possible failures in the electrical power supply of each load ^sac 

compltoteSfiner "* ** * ^ read * *• 



Logic 
state 

sequence 


Faults detected 


Circuit status 


000 
001 

0 1 0 

01 1 
1 00 
1 01 
1 1 0 
1 1 1 


CC + CO + CP 
CC + CD + CP 
CC + CO + CP 
CC + CO + CP 
CC + CC + CP 
CC + CC + CP 
CC + CO + CP 
CC + CO CP 


Permanent SHORT-CIRCUIT 
Impossible (CC=0 implies CP=0) 
Impossible (CC=0 implies CO=0) 
Impossible (CC=0 implies CO=0, CP = 0) 
CP transient during the test 
NORMAL functioning 
PERMANENT control 
OPEN CIRCUIT 



bv CCCnTZrT ' IfTT ° f 3 f ort - c,rcuit ' 80 °P* n <*«* or a permanent control is represented 
CP respectively, the complementing of these symbols representing the absence of the fault. 
After filtering by software provided for this purpose and installed in the computer, over several test 
cycles, it appears that the logic state sequences corresponding to the principal faults are as follows- 
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Sequence 


Status of the circuit 


101 


NORMAL FUNCTIONING 


000 


SHORT-CIRCUIT 


111 


OPEN CIRCUIT 


1 10 


PERMANENT CONTROL 



10 



75 



20 



25 



30 



35 



40 



50 



55 



Reference is now made to Figure 4 of the appended drawing which shows the timing diagrams of the 
signals present on the 1/0 line connecting the computer to a control circuit of the device according to the 
invention, during the load test phases, for the various cases of faults. 

In the various timing diagrams of the states of the 1/0 line it wii! be noted that the 0 levels imposed on 
re-reading by the control circuit are shown slightly shifted above the 0 levels imposed on the line by the 
computer in order to allow it to be more easily to distinguished whether it is the computer or the control 
circuit which is acting on this bidirectional line. 

Figure 4 also shows the timing diagram of the logic states of the selection line SEL which allows the 
various test phases performed to be distinguished. 

At this point in the description of the device according to the invention it should be noted that, in the 
application to a wheel anti-locking device mentioned above by way of example, the computer periodically 
computes the state, conducting or cut-off, in which each electro-valve of the anti-locking device should be in 
order to ensure braking without skidding of the vehicle when the imminence of such skidding is detected. 
This computation is carried out simultaneously for all of the electro-valves, numbering six for example, a 
very large number of times per second, for example every five milliseconds. 

According to the invention, the test sequence described above is therefore carried out at the beginning 
of each five millisecond period which separates two possible corrections by the computer of the state of the 
electrovalves. It is important that this test sequence should be very short in order that the switchings of the 
1/0 line which it involves do not disturb the functioning of the electro-valves. For this purpose, according to 
the invention, the three short-circuit, open circuit and permanent control tests are carried out in 50 
microseconds each, each test being sub-divided into a period of 20 microseconds during which the 
computer controls the I/O line and a following period of 30 microseconds during which the port of the 
computer which is connected to that line is configured in the input mode to allow the reading by the 
computer of the states imposed on the 1/0 line by the associated control circuit. Thus all of the tests are 
carried out in 150 microseconds, simultaneously on all of the electro-valves, this taking place every 5 
milliseconds, which ensures a real-time detection of faults which possibly appear, without this detection 
disturbing the control of the electro-valves by the computer. 

The invention is not limited to the parallel test procedure on all of the loads described above and could 
of course use a series test procedure of the said loads, as is well known. In the series test procedure, the 
sequence of tests is applied successively to each load. This method has the disadvantage of giving the 
computer an image of all the functioning conditions of the said loads only once all of the interrogated loads, 
for example for six loads, are at the end of six cycles of 5 milliseconds, he. 30 milliseconds, if the 
application example described above is taken again. In comparison, the parallel test procedure allows this 
image to be obtained every 5 milliseconds. On the other hand the series test procedure has the advantage 
over the parallel test procedure of allowing a very simple implementation of cross-talk tests because each 
electrovalve is separately interrogated by the computer. 

In fact, in the case in which the device according to the invention is used in a system requiring the 
control of several loads, as is the case in the wheel anti-locking device mentioned above which has 6 
electro-valves and therefore 6 loads, it can be advantageous to add to the test sequence described above a 
cross-talk test in order to diagnose possible interactions and short-circuits between the inputs and the 
outputs of the control circuits (so called "internal ■ cross-talk) or the between the wires connecting the loads 
to their respective control circuits (so called "external" cross-talk). 

Cross-talk occurrences such as these can be diagnosed by successive test cycles during each of which 
only one load is excited by the computer, during the permanent control test The status sequences taken 
either during writing or during reading during the permanent control test are analysed by software loaded in 
the computer which, by noting small differences between the timing diagrams taken on the I/O lines, can 
identify the control circuits subject to cross-talk of internal or external origin. 

Reference is now made to Figure 5 of the appended drawing which shows in detail the logic section of 
a control circuit incorporated in the device according to the invention, a block diagram of the principle of 
which is shown in Figure 2. The various blocks in Figure 2 are marked by broken lines in the block diagram 
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of Rgure 5 and have been given the same references. Only the features of the circuit in Figure 5 which 
have not been described in connection with the examination of Rgure 2 will be described below. 

The logic section of the circuit is produced using NOR, NAND and NOT complementary logic gates 
(these terms being the commonly used English terms for denoting these gates). Thus, the OR function of 
5 the circuit in Rgure 2 is achieved by means of a NOR gate 13 and an inverting NOT 14, connected 
between the output of the NOR gate 13 and the current source 11, conventionally produced by means of a 
current mirror circuit. 

The voltage detector 7 is activated following the breakdown of a Zeher diode 15 which is reverse 
connected between the OUT pin of the control circuit and this detector, during the formation of an excess 

10 voltage on this pin following the cutting-off of the power transistor 4 by a signal emitted by the computer on 
the I/O pin of the circuit and transmitted by the interface circuit 6. The output signal of the detector 7 is 
stored in a conventional flip-flop formed from two NAND gates 16 and 17. The sub-circuit CO is thus 
constituted by this flip-flop and a NOR gate 18 having two inputs respectively connected to the I/O pin of 
the circuit and to the output of the flip-flop (16, 17), the gate 17 of the flip-flop comprising an input 

75 connected to the SEL line, the sub-circuit thus being fed with signals coming from the detector 7 and from 
the SEL and I/O lines in order to function as described with reference to Rgure 2. 

Incidentally, the presence of a diode 18 will be noted between the terminal common to the Zener diode 
15 and the input of the detector 7 on the one hand, and the gate of the transistor 4 on the other hand, for 
protecting the latter by cutting off on breakdown of the diode 15 on the appearance of an excess voltage on 

20 the OUT pin of the circuit A ground resistor 19 allows the detector 7 to measure the excess voltage. 

The sub-circuit CP is constituted by a simple NOR gate 20 having three inputs respectively connected 
to the I/O pin of the circuit, to the SEL line and to the output of a detector for detecting an internal or 
external short-circuit of the power transistor 4, this short-circuit causing a permanent control of the load 
connected to the OUT pin of the circuit The output of the NOR gate 20 is connected to an input of the 

25 NOR gate 13. As has been seen above the detector 8 is constituted by a simple voltage comparator 
supplied with a reference voltage close to zero, of 1 or 2 volts for example. A return load resistor 21 is 
connected to the input of the detector. A diode 22 is reverse connected between the OUT pin of the circuit 
and the point common to the return load and to the input of the detector 7. The diode D22 avoids the return 
of the high voltage (55V approximately during the "CLAMP" period) of the OUT output to the internal power 

30 supply voltage VCC via the resistor 21. 

In the case of an open circuit of the load, the OUT output tends to remain at a potential close to 0 V 
since this output becomes floating. It is therefore necessary to fix this potential at a level such that it is 
possible to disassociate the open circuit fault CO from the permanent control fault CP (this fault being 
detected, as seen above, by the presence of a low voltage on this OUT output). The function of the resistor 

as 21 is therefore to maintain a potential close to that of the supply in the case of an open circuit. 

The sub-circuit CC essentially comprises a flip-flop comprising two NAND gates 23 and 24 for storing 
an excess current signal emitted by the detector 9, and a detector of rising edges on the SEL line 
constituted from a flip-flop having two NAND gates 25 and 26, one input of which is connected to this SEL 
line, and from a NAND gate 27 having two inputs respectively connected to an output of the flip-flop (25, 

40 26) and to the SEL line in order to transmit on its output a signal for resetting the flip-flop (23, 24) to zero 
when a rising edge is detected on the SEL line. The output of the gate 23 of the flip-flop (23, 24) is 
connected to an input of the NOR gate 13. 

It will also be noted that the interface 6 is conventionally constituted by a voltage multiplier 28 
necessary for the control of the gate of the power transistor 4, this multiplier itself being supplied by a 

45 voltage source VCC for the power supply of the control circuit 2 and of ihe computer associated with it In 
this interface there is a NAND gate 29 having two inputs connected to the I/O pin and to the output of the 
NOR gate 13. The output of the NAND gate 29 controls an inhibit input 30 of the voltage multiplier 26 and 
the gate of an MOS transistor 31 controlling the discharging to ground of the gate of the transistor 4. In the 
case of a holding of the I/O line at the logic "1 level (caused for example by an accidental short-circuit of 

so the latter to + VCC); it is necessary to be able to ensure the cutting of the power transistor during the 
presence of a short-circuit in the load. The NAND logic gate 29 carries out this safety function preventing 
the destruction of the power switch. Furthermore, the voltage multiplier 26 necessary for the control of the 
gate of the power transistor, consumes a non-negligible current from the VCC power supply. It is therefore 
preferable to provide an inhibit input on this multiplier in order to reduce the consumption of the logic circuit 

55 when the latter is not controlling the load. 

Transistors 32, 33 are connected as resistors between the I/O and SEL lines respectively and ground In 
order to reference the potentials of these pins in case the latter become disconnected, this conforming with 
the so-called "FMECA" method of analysis of electrical failure in a system. 



8 



EP 0 418 665 A1 



All of the components shown in Figure 5 can be integrated on one chip in a package having five pins: 
VCC. I/O. SEL. OUT and GND. such as a so-called "Pentawatt" TO 220 package. Because, according to the 
invention, the SEL line is common to several control circuits it appears possible to have two control circuits 
according to the invention on the same chip in a TO 220 type package for example having seven pins and 

5 called a "Heptawatt" package: VCC, GND, two I/O pins, two OUT pins, and a SEL pin. The size of the 
device according to the invention can thus be reduced while lowering its manufacturing cost. 

Throughout the above description the control circuits used are connected to the "ground" side of the 
load to be controlled. It is clear that the invention is not limited to such an arrangement and that it obviously 
extends to devices in which the control circuits are connected to the power supply circuit of load, on the 

70 side where the power supply source of this circuit is located, as is frequently the case. 

Figure 6 of the appended drawing shows the device according to the invention, integrated with a control 
device for six loads comprising, in order to establish a comparison with the (known) device of Figure 1, a 
main computer and an auxiliary monitoring computer and six control circuits 2-0 to 2-5 according to that 
described in Figure 5. Superficially, the device thus has the same configuration as that of Figure 1 but it is 

/s immediately apparent that as the SEL line is common to all of the circuits and connected to a single OUT 
pin of the main computer, the control of the circuits 2-0 to 2-5 by the computer here uses only seven pins 
of the latter instead of twelve (IN-0 to IN-5 and OUT-0 to OUT-5) on the computer of the device in Figure 1. 
Similarly, the monitoring computer dedicates no more than six pins instead of twelve to the monitoring of 
the main computer. This results in a reduction in the same proportion in the wire connections between the 

20 computers and the control circuits which is an essential advantage obtained by the present invention. As 
seen above, another no less essential advantage provided by the invention is that it allows the discrimina- 
tion of the sought faults in order to improve the degraded mode functioning of the control of the power 
supply of the loads. 

The invention is of course not limited to the embodiment described and shown which has been given 
25 only by way of example, nor to the application mentioned above to the control of the electro-valves of a. 
wheel anti-locking device of a vehicle. On the contrary it extends to the control of the electrical power . 
supply of any load, isolated or in a group of such loads, controlled by "intelligent" or other power circuits. 

Neither is the invention limited to the detection and discrimination of four functional faults at most. The 
use of an additional selection line would allow the maximum number of detectable faults to be increased to 
30 9 for example. 

Furthermore the invention* is not limited to a device produced in MOS technology, this device being 
able to call upon any current technology for producing integrated circuits, for example the TTL technology. 



35 Claims 

1. Device for the detection and the discrimination of functional faults in at least one electrical power supply 
circuit for a load placed in series with an electronic switch of which one control pin is connected to a 
computer by a control line (1/0) transmitting to that pin switching signals controlled by the computer, this 

40 device comprising means of detection of at least one functional fault from the group formed by: the short- 
circuit of the load, the permanent control of the load and the opening of the power supply circuit of that 
load, characterized in that these means of detection comprise at least one detector (7 ; 8 ; 9) sensitive to an 
electrical characteristic of a predetermined point in the power supply circuit of the load and capable of 
forming a logic signal representative of the position of the value of this characteristic with respect to a 

45 predetermined value, and a logic circuit (10) connected to the output of the detector (7 ; 8 ; 9) , to the 
control line (I/O) and to a selection line (SEL) both connected to the computer (1) in order to transmit to the 
logic circuit at least one combination of logic signals emitted by the computer and capable of activating this 
circuit for the purpose of the detection of a possible presence of a particular fault and for the production of 
a signal representative of the detected situation, the output of the logic circuit (10) then controlling means of 

so imposition, on the control line (I/O), of one of two logic states respectively corresponding to the presence or 
the absence of the fault, the computer (1) comprising means for configuring in readout mode that one of its 
ports which is connected to the control line (I/O) when the logic state of the latter is imposed by the logic 
circuit and of identifying a possible fault by the readout of this state. 

2. Device according to Claim 1 , characterized in that the logic circuit comprises several sub-circuits (CO, 
55 CP. CC) each connected to one of the said detectors (7, 8, 9), and in that the computer (1) comprises 

means for establishing, on each of the lines (I/O) and (SEL), a plurality of series of logic levels according to 
line-to-line combinations each capable of activating one of the sub-circuits (CO, CP, CC). the sub-circuits 
reacting successively to the reception, when they are activated, of a signal coming from an associated 
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detector in order to impose on the line (I/O) a logic state corresponding to the received signal while the 
computer is reconfigured in order to read the state of this line, the series of logic states thus imposed on 
the line (I/O) by the various sub-circuits being identified by the computer as representative of the presence 
or absence of a particular fault. 

5 3. Device according to Claim 2, in which the electronic switch is a transistor (4), characterized in that one 
(9) of the detectors is sensitive to the presence of an excess current in the circuit controlled by the 
transistor (4) such that it transmits a logic signal to a sub-circuit (CC) activated by a predetermined logic 
level established on the line (SEL) by the computer, the sub-circuit then controlling the said means of 
imposition (11) such that the latter impose on the line (I/O) a predetermined logic level representative of the 

w presence of this excess current while the computer is configured to read the status of this line and to 
combine this status with the statuses imposed sequentially on the line by the other sub-circuits, in order to 
derive from this the possible presence of a short-circuit in the load. 

4. Device according to Claim 3, characterized in that the sub-circuit (CC) comprises a flip-flop (23, 24) for 
storing the signal supplied by the detector (9) and a flip-flop (25, 26) for resetting the storage flip-flop to 

75 zero, controlled by a transition of the signal imposed on the line (SEL) by the computer. 

5. Device according to Claim 2, in which the electronic switch is a transistor (4) connected in series with the 
load, on the "ground" side of the power supply circuit of the load, characterized in that one (8) of the 
detectors is sensitive to the voltage existing at the point of the power supply circuit common to the load (3) 
and to the transistor (4) in order to transmit a logic signal to a sub-circuit (CP) activated by a predetermined 

20 logic signal established on the line <SEL) and by another logic signal established on the line (I/O) capable of 
ensuring the cutting off of the transistor, the logic signal then emitted by the sub-circuit (CP) to the means 
of imposition (11) commanding the establishment on the line (I/O) of a logic level read by the computer and 
combined by the latter with the levels sequentially imposed on the line by the other sub-circuits and to 
derive from this the possible presence of a permanent control of the load. 

25 6. Device according to Claim 5, adapted to an inductive load, characterized in that one (7) of the detectors 
is sensitive to an excess voltage appearing at the point of the power supply circuit of the inductive load 
which is common to the latter and to the transistor (4), in order to then transmit a logic signal to a sub- 
circuit (CO) activated by the computer by means of a predetermined logic signal established on the line 
(SEL) and of another logic signal established on the line 1/0 and capable of commanding the cutting off of 

30 the transistor (4), the logic signal then emitted by the sub-circuit (CO) to the means of imposition (11) 
commanding the establishment on the line (I/O) of a logic level read by the computer and combined by the 
latter with the levels sequentially imposed on that line (1/0) by the other sub-circuits in order to derive from 
this the possible presence of an accidental opening of the power supply circuit of the load. 

7. Device according to any of the previous claims, characterized in that the means of imposition (11) are 
35 constituted by a current source connected between the line (I/O) and ground and controlled by the output of 

the logic circuit (10). 

8. Device according to Ciaim 7, characterised in that the computer (1) comprises a means (14) of controlling 
the level of the line (I/O) and in that a return load (13) is connected between a power supply source of the 
logic circuit and the line (I/O), between the computer and the current source. 

40 9. Device according to any of the previous claims, adapted to a system comprising several power supply 
circuits for an equal number of loads, controlled by a single computer periodically correcting the state of all 
of the switches, characterized in that the sequence of detection of faults controlled by the computer has a 
short duration with respect to the periodicity of the corrections of the states of the switches. 

10. Device according to Claim 9, characterized in that the computer comprises means of detection of 
45 crosstalk on the controls of the loads by processing the logic levels imposed and read on the line (I/O) by 

the computer. 

11. Device according to any of the previous claims, characterized in that the transistor (4), the detectors (7. 
8, 9), the logic circuit (10) and the associated means of imposition (11) for the control of each load are 
integrated in the form of a control circuit (2). 

so 12. Device according to Claim 11, characterized in that the transistor (4) is a power transistor of the MOS 
type and in that the control circuit (2) then takes the form of an intelligent power circuit 
13. Device according to Claim 9, characterized in that the selection Ones (SEL) associated with the loads 
are connected to a single pin of the computer (1). 

55 
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